content-security-policy

Content Security Policy (CSP) header not implemented

contribute

Contribute.json isn't required on websites that don't belong to Mozilla

cookies

cross-origin-resource-sharing

Content is not visible via cross-origin resource sharing (CORS) files or headers

public-key-pinning

HTTP Public Key Pinning (HPKP) header not implemented

redirection

referrer-policy

strict-transport-security

HTTP Strict Transport Security (HSTS) header set to a minimum of six months (15768000)

subresource-integrity

Subresource Integrity (SRI) not implemented, and external scripts are loaded over HTTP or use protocol-relative URLs via src="//..."

x-content-type-options

X-Content-Type-Options header not implemented

x-frame-options

X-Frame-Options (XFO) header not implemented

x-xss-protection

Diagnostics

Metrics

ftp-data

http

EtherNetIP-1

http-alt

caerpc

An MX record was detected. MX records direct emails to a mail exchange server.

MX Record Detection

A DNS TXT record was detected. The TXT record lets a domain admin leave notes on a DNS server.

DNS TXT Record Detected

_fbp

_gat

_gid

pll_language

Les Murmures du Ligon

WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.

WordPress

MySQL is an open-source relational database management system.

MySQL

PHP is a general-purpose scripting language used for web development.

YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.

YouTube

WP Rocket is a caching and performance optimisation plugin to improve the loading speed of WordPress websites.

WP Rocket

Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.

Yoast SEO

Apache is a free and open-source cross-platform web server software.

Apache

Polylang is a WordPress plugin which allows you to create multilingual WordPress site.

Polylang

Google Font API is a web service that supports open-source font files that can be used on your web designs.

Google Font API

Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.

jQuery Migrate

jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.

jQuery

Google Analytics is a free web analytics service that tracks and reports website traffic.

Google Analytics

Facebook pixel is an analytics tool that allows you to measure the effectiveness of your advertising.

Facebook Pixel

core-js is a modular standard library for JavaScript, with polyfills for cutting-edge ECMAScript features.

core-js

HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.

HSTS

Infomaniak is a hosting company based in Geneva, Switzerland.

Infomaniak

Open Graph is a protocol that is used to integrate any web page into the social graph.

Open Graph

Absence of Anti-CSRF Tokens

Content Security Policy (CSP) Header Not Set

Missing Anti-clickjacking Header

Vulnerable JS Library

Cross-Domain JavaScript Source File Inclusion

Timestamp Disclosure - Unix

X-Content-Type-Options Header Missing

Information Disclosure - Suspicious Comments

Re-examine Cache-control Directives

Content Security Policy (CSP) implemented unsafely. This includes 'unsafe-inline' or data: inside script-src, overly broad sources such as https: inside object-src or script-src, or not restricting the sources for object-src or script-src.

Cookies set without using the Secure flag or set over HTTP

Initial redirection is to HTTPS on same host, final destination is HTTPS

HTTP Strict Transport Security (HSTS) header set to less than six months (15768000)

X-Content-Type-Options header set to "nosniff"

X-Frame-Options (XFO) implemented via the CSP frame-ancestors directive

X-XSS-Protection header set to "1; mode=block"

block-all-mixed-content; frame-ancestors 'none'; upgrade-insecure-requests;

_ga_78DG5YPE7N

_ga_D9ZE5LB4KQ

_shopify_sa_p

_pin_unauth

_gcl_au

_shopify_sa_t

_orig_referrer

_shopify_s

_ga_HXMZT7KSHG

_shopify_y

_landing_page

keep_alive

_cmp_a

localization

secure_customer_sig

Coque en Bois

Websites that have a shopping cart or checkout page, either using a known ecommerce platform or a custom solution.

Cart Functionality

Shopify is a subscription-based software that allows anyone to set up an online store and sell their products. Shopify store owners can also sell in physical locations using Shopify POS, a point-of-sale app and accompanying hardware.

Shopify

Smile App offers a loyalty program for Shopify stores.

Smile App

Privy App helps you improve your website conversion rate, grow your email list, automate your email marketing, drive repeat purchases and much more.

Privy App

GSAP is an animation library that allows you to create animations with JavaScript.

GSAP

Visa

PayPal is an online payments system that supports online money transfers and serves as an electronic alternative to traditional paper methods like checks and money orders.

PayPal

MasterCard facilitates electronic funds transfers throughout the world, most commonly through branded credit cards, debit cards and prepaid cards.

Mastercard

Apple Pay is a mobile payment and digital wallet service by Apple that allows users to make payments in person, in iOS apps, and on the web.

Apple Pay

American Express, also known as Amex, facilitates electronic funds transfers throughout the world, most commonly through branded credit cards, debit cards and prepaid cards.

American Express

Amazon Pay is an online payments processing service that is owned by Amazon. It lets you use the payment methods associated with your Amazon account to make payments for goods and services.

Amazon Pay

Societe des Avis Garantis is a French company that provides customer review and rating services for businesses through its online platform.

Societe des Avis Garantis

Smile is a provider of ecommerce loyalty programs.

Smile

Polyfill is a service which accepts a request for a set of browser features and returns only the polyfills that are needed by the requesting browser.

Polyfill

Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.

Google Tag Manager

Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.

Google Hosted Libraries

Privy is a all-in-one marketing automation platform for ecommerce.

Privy

Pinterest Conversion Tag allows you to track actions people take on your website after viewing your Promoted Pin.

Pinterest Conversion Tag

PhotoSwipe is an open-source gallery to support JavaScript-based image zooming.

PhotoSwipe

LazySizes is a JavaScript library used to delay the loading of images (iframes, scripts, etc) until they come into view.

LazySizes

Hotjar is a suite of analytic tools to assist in the gathering of qualitative data, providing feedback through tools such as heatmaps, session recordings, and surveys.

Hotjar

Flickity is a JavaScript slider library, built by David DeSandro of Metafizzy fame.

Flickity

boomerang is a JavaScript library that measures the page load time experienced by real users, commonly called RUM (Real User Measurement).

Boomerang

Priority Hints exposes a mechanism for developers to signal a relative priority for browsers to consider when fetching resources.

Priority Hints

reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.

reCAPTCHA

Pinterest Ads is an online advertising platform developed by Pinterest.

Pinterest Ads

Sendinblue is an email marketing solution for small and medium-sized businesses that want to send and automate email marketing campaigns.

Sendinblue

OVHcloud is a global, cloud provider delivering hosted private cloud, public cloud, and dedicated server solutions.

OVHcloud

The web-vitals JavaScript is a tiny, modular library for measuring all the web vitals metrics on real users.

web-vitals

Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.

Cloudflare

Webpack is an open-source JavaScript module bundler.

Webpack

Module Federation is a webpack technology for dynamically loading parts of other independently deployed builds.

Module Federation

HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.

HTTP/3

CSP: Wildcard Directive

CSP: script-src unsafe-eval

CSP: script-src unsafe-inline

CSP: style-src unsafe-inline

Cross-Domain Misconfiguration

Sub Resource Integrity Attribute Missing

CSP: Notices

Cookie No HttpOnly Flag

Cookie Without Secure Flag

Cookie without SameSite Attribute

Permissions Policy Header Not Set

Strict-Transport-Security Header Not Set

Base64 Disclosure

Loosely Scoped Cookie

Modern Web Application

Non-Storable Content

Retrieved from Cache

Session Management Response Identified

Storable and Cacheable Content

All cookies use the Secure flag and all session cookies use the HttpOnly flag

HTTP Strict Transport Security (HSTS) header not implemented

Subresource Integrity (SRI) is not needed since site contains no script tags

https

PrestaShop-d88ae6b6381834d2794f1a055301a0fa

Salaisons du Velay

Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.

Bootstrap

Apache HTTP Server

Microsoft 365 is a line of subscription services offered by Microsoft as part of the Microsoft Office product line.

Microsoft 365

Mailjet is an email delivery service for marketing and developer teams.

URL (3)	Accessibilité	Performance	SEO	SSL	HTTP	Vulnérabilités	CodeQL	Nmap	Ports ouverts	Trackers	Cookies	404
lesmurmuresdulignon.com
www.coque-en-bois.fr
www.salaisonsduvelay.com